www.gianmar.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e2:32:97:c0:83:fb:65:73:03:d0:1b:06:69:1f:ad:b2:0b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.gianmar.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e2:32:97:c0:83:fb:65:73:03:d0:1b:06:69:1f:ad:b2:0b
Serial Number (int): 338307922060707053807816227906223562666507
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 50:14:7f:29:c3:f9:2b:ed:70:ad:91:cb:9e:70:9a:7c:bb:55:48:12
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a5:9f:64:6f:64:07:2c:fa:d7:a7:20:fa:17:7b:65:5e:83:03:ae:c7
Fingerprint (sha256): 03:28:4b:d6:b2:48:c8:78:c1:28:77:ef:59:3c:8d:db:0b:df:06:9d:62:a3:3e:ad:83:dc:1d:af:f6:37:a3:b4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.gianmar.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gianmar.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.gianmar.co

Other certificates including the domain name gianmar.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.gianmar.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338307922060707053807816227906223562666507
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 17:29:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 17:29:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gianmar.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 670431188727523873528566421649942568536023917039081956936128631373239173782550054271759193043033211714927111823418594986730270113283397546979071384867377485795772819685755266526740182202135665876474291110937177056670031166197330472580840036150196868718227868136761238285334938864214898641396571870888790579962149460816478583302522688924933109730586438094107057901787562354504082825187768411526616717842883378215344040208139887162504069830911690339550164226674012474752333973645735389197760177239917547019137580483767821084057694998092846825699237054685889520368457617360253506100115805240790469298128856825725825486709887740658565250419410471947648654074308457920767889995253929718707287812938311338753388430245281063061654943461286779267461396878139168375322859243864495235465261113513953186474356433689703092338642057024667153010270954517988184350409813686950034078842750937701550509212068288381858964364332864374031741213271430005003387061239220660256230804934695858838275203543129461760001030535680153997301554012420400465585316611375817567633067768598587947015966212038942271783968938572201327551473855896969339313191043120125012104965442070113288133878845597961997841951645231450531032292848863313457606477676730419097529900379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							50147f29c3f92bed70ad91cb9e709a7cbb554812
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gianmar.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016affb46e970000040300473045022100db39091ad002c225e85902133f0c803594ccefe307cbec92a0e0afa113d6742c0220564462a47300e26f1c95623db15b569ffd9fbbbb5240d5d66430b41ab8db2996007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016affb470a80000040300473045022100cb1ecddd69d0508d76276f5495def32b1cdc116ed340b27e4644dca711ad45e402200830d09ca6524baa2b697fcc4a2d52e4e60c73ca04af5569be6c3cf7b39803bb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004fe61abf434cba4c14b4d2a7487b4312d06c6f6a49e40e6678b7e71687488fc89761399de6903fe0022682b4077f5cdd19ac873152ae3954560884fd12a2022a8aa04f1a151f7e20b2cc9461ad0e4e94022c485e708b9a57312573af0244c668db61984a696544a3c4b36fded03649dc84fd1e819f34302d74ca17cb8700cd4667fbeb3e5c4844589ae50f6b5993bfae32e8c43ba51377589ffa39af7185b1fe367fe5b527cd995e47e0754d99da3781e1ce686a9f1754579227416db8194c173750bd89b2814ae56e879113de5c28b685d293c6642390ca11dd28ef96e16494a3c4d7376fbdae87fface9127881de92c66d2af26e4ec7a502e2ce7c593b090d